Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: mHNH9MCY8w5ULNxjVO45PU/873v4ua1LdMsBWI6Tvqo=
Subject key identifier: 47:1D:FF:DA:AD:60:8A:1A:3F:CC:4E:DA:4C:E7:0F:51:5E:D0:0D:30
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019D37F795E1583F1BBDF2C571328C456330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0D77
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: xG6ucrgESsrNhM3HNTHjCiGIkoJeXWHPj34iAh9hSbM=)
2: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (hash: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc=)
3: xjDEGzwGWC32KNbYgkAYk69skio.roa (hash: k8gKJxzXreZ0dQt23gwa3WP6vJjAJk09SNp21SFCKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:95:e1:58:3f:1b:bd:f2:c5:71:32:8c:45:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=471dffdaad608a1a3fcc4eda4ce70f515ed00d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:3a:c7:bb:e2:45:10:dc:80:59:2f:8d:76:
66:70:f7:bb:1f:96:d6:98:de:21:08:21:34:d0:76:
03:cb:40:a9:0c:78:fd:17:f1:36:f9:09:35:1b:68:
c1:b0:89:17:c1:ca:fe:17:e4:59:a3:e8:3e:f0:1c:
3f:20:ed:86:0f:1a:88:1c:ad:f5:7d:20:bd:d7:a0:
06:cf:24:9c:db:ea:db:d0:e0:e6:a9:d6:77:bb:91:
c2:d3:f3:93:6f:b3:5b:3f:61:b8:21:26:72:a5:1c:
fc:ea:1b:e2:5a:f5:16:6e:78:bc:19:5c:18:6b:50:
3a:39:5e:a8:8e:63:0d:63:44:2d:d2:7a:25:4d:b1:
1c:fb:f0:e9:77:73:34:6e:81:e8:da:c1:91:f8:fb:
55:58:b9:75:b0:93:9c:af:ce:56:f8:27:de:77:07:
51:a3:e6:c4:4d:e5:12:9c:42:a1:7d:4e:e0:d8:b4:
ce:3f:b5:85:8e:24:de:17:c4:ec:8b:6c:89:0b:aa:
56:42:ca:73:24:3b:a7:90:1d:9e:32:4e:6e:5f:d6:
23:7e:a2:3b:cc:6a:9b:cb:e1:0e:08:6e:96:6f:ad:
8d:f1:21:60:8c:c7:a0:5a:f9:c4:07:a4:35:da:04:
fa:64:78:69:ab:91:13:52:7f:7d:0f:50:7f:0e:9b:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:FF:DA:AD:60:8A:1A:3F:CC:4E:DA:4C:E7:0F:51:5E:D0:0D:30
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:f7:bd:ff:5b:72:02:da:9a:99:35:5f:82:90:a7:14:d3:
97:6c:92:ef:79:9f:4d:82:df:f7:70:fd:c0:75:32:32:23:7a:
b8:d4:8e:5b:ee:f9:e2:c1:13:27:b6:a2:b2:52:1a:56:73:02:
c2:45:0d:23:7c:6a:f5:65:5f:66:50:4e:a5:a2:9b:14:41:8a:
f3:7f:1b:77:17:e6:fd:ff:79:93:dd:f2:0a:5c:3b:33:46:be:
45:03:09:69:22:2e:f0:d2:37:00:95:53:5f:a7:f0:0d:fe:c1:
de:8c:5b:8d:2b:86:9f:59:99:f5:8d:be:53:9c:29:3c:37:a9:
cb:28:a9:99:1a:a8:b9:f0:d8:8a:ca:0e:c8:a1:2a:e5:c4:b2:
01:87:eb:ae:1e:2f:b3:04:b6:0e:cb:10:b7:73:dc:1e:ec:43:
54:2d:ea:2a:1c:71:2c:01:b6:79:2a:ff:eb:73:0c:5a:4c:4e:
12:d3:84:ad:37:24:31:54:3c:3c:b7:d1:a4:a8:98:11:74:f9:
e1:fd:16:b5:dc:42:45:b3:5f:57:89:18:96:68:5f:0c:61:75:
42:46:9f:ce:04:cc:7b:6b:2a:a8:09:df:f9:40:ac:b6:5a:15:
75:cf:43:69:62:05:3a:7a:29:f8:fd:34:b6:d2:90:a3:43:9a:
f0:a9:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:22 2026 by rpki-client